Home

Awesome

SIMple ID: QR codes for authentication on basic and feature phones

This repository contains a Java Card 3.0.4+ applet which generates and displays QR codes for authentication using (almost*) the standard SIM ToolKit (STK) API. The itention is to permit low-cost, basic and feature phones (e.g., Jio) to offer SIM-secured authentication modes based on QR codes.

You can also read our paper and watch a short demonstration video.

Requirements

Tested with:

pip2 install --user pycrypto pyscard

Recommended:

Build

Ensure you have OpenJDK 11, the ant build tool and configure JDK 11 as your Java environment:

 sudo apt install openjdk-11-jdk ant
 sudo update-alternatives --config java

or

brew install openjdk@11 ant
export JAVA_HOME=$(/usr/libexec/java_home -v 11)

Clone this repository:

git clone https://github.com/alan-turing-institute/SIMple-ID.git
cd SIMple-ID

Clone the Javacard SDK and sim-tools dependencies:

git submodule update --init --recursive

Then run ant to build the Java Card applet, QRSTK.cap.

Install

Load and install the STK applet. It is vitally important that you replace KIC1 and KID1 with the specific keys for your Java Card. These are provided at the time of purchase and enable the Over The Air (OTA) security needed for loading STK applets to your card.

python2 sim-tools/shadysim/shadysim_isim.py --pcsc \
      -l ./bin/QRSTK.cap \
      -i ./bin/QRSTK.cap \
      --kic KIC1 \
      --kid KID1 \
      --instance-aid f07002CA44900101 \
      --module-aid f07002CA44900101 \
      --nonvolatile-memory-required 0fff \
      --volatile-memory-for-install 0fff \
      --access-domain 00000010 \
      --enable-uicc-toolkit \
      --enable-uicc-file-access \
      --max-menu-entry-text 20 \
      --max-menu-entries 06

To uninstall the STK applet, again replace KIC1 and KID1 with your card keys and then run the following.

python2 sim-tools/shadysim/shadysim_isim.py --pcsc -d f07002CA44\
      --kic KIC --kid KID

Credits and Gratitude